Secure

Prevent others from accessing your account

Easy

Quickly and easily log in with the tap of a button

Fast

Use from any location with the mobile application

Who?

Duo Two Factor Authentication is currently for available to all Eastern Washington University employees.

Why?

Two-factor authentication through Duo will not only help secure the campus network, it will also ensure only authorized users can access critical information, such as paychecks and your sensitive information. In addition to easy enrollment on a device you already have, Duo’s secure cloud-based environment meets all federal and industry compliance regulations as well.

How?

Register for the EWU Two Factor Authentication service. We recommend registering more than one device so you have a back-up if your device is lost, stolen, broken or otherwise unavailable.

Duo Mobile App on a Smartphone or Tablet

Installing Duo Mobile on your device will give you two ways to authenticate. When you try to log in to a system protected by Duo Two Factor Authentication, it will push an authentication request to the Duo Mobile application on your device. Once you approve the request, you will be admitted to the system.

Passcodes via Text

You will receive passcodes via a single text message. One passcode will be used each time you log in to the system.

Hard Token

While using a mobile device is most convenient option and the one that most users prefer, users may acquire a hardware token instead.

Callback via Phone

Duo will generate an automated phone call to approve your access to the system.

Register for Two Factor Authentication

Manage Devices

FAQs

Do I have to use a mobile device?

There are several methods that can be used, including a mobile device app, SMS text message, and voice phone call options. While using a mobile device is most convenient option and the one that most users prefer, university employees may request a hardware token instead. Replacements for lost or stolen tokens will be charged to the user’s department.

Does use of my personal device for 2FA result in any data or other records stored on my device that are subject to disclosure as “public records”?

If you use Duo Mobile, there is no data stored on your smartphone or tablet. Period. We use Duo because it’s simple and secure, and one of the reasons for this is it creates no records on your personal device.

If you receive phone callbacks, there is no data on your phone and you can delete the metadata from your phone’s history of recent incoming calls because it’s transitory and the administrative purpose is fulfilled as soon as you’ve completed the call.

In each case, the result is the same: no data related to 2FA on your device that’s subject to disclosure.

Can I use Duo with my smartphone without downloading the mobile app?

Yes, you can. If you do not want to download and use the Duo mobile app, you can specify this during the device enrollment process. You must choose “other” when selecting the smartphone’s operation system.

What if I replace or upgrade my mobile device? What if I get a new phone number or don't have access to my old number?

You can enroll additional phones or tablets at any time. However, to prevent the malicious registration of unauthorized devices, you will need to have access to at least one of your registered devices. If you do not have access to one of your registered devices, you must contact the Information Technology department to have your device registration reset.

After reinstalling the Duo Mobile app, you can re-activate your account using the Manage Devices site. There, you can select the “Manage Devices” option and follow the prompts. The Duo Mobile app also now has a restore option, learn more about using it here.

What should I do if I forget my mobile device at home?

If, as recommended, you’ve added your office phone or another 2FA device to your Duo account, just select the appropriate device or calling option during login. If you didn’t, please contact the IT Help Desk.

I am going to traveling abroad, how can I continue to use multi-factor authentication?

Yes. If you are using a smartphone, you can simply use the Duo mobile app to generate a passcode each time authentication is required. Data service is not needed to generate passcodes through the Duo Mobile app. If you have a token, just bring it along with you while traveling. If you are not able to use your mobile device while traveling and don’t have a token, other options are available. For additional information, consult this article in our knowledge base: Traveling with Duo

Individuals who are traveling internationally should check with the Director of Risk Management regarding potential export control issues associated with traveling with different types of multi-factor authentication technologies in accordance with EWU Policy 201-10 (Export Control).

What are multi-factor authentication tokens?

Sometimes referred to as usb security keys, a token, when the button is pressed, automatically enters a 6-digit passcode at the Duo multi-factor authentication prompt.

A variety of tokens are shown here:

I have additional questions about Duo and 2FA, where can I learn more?

We’ve posted additional information in our knowledgebase:

If your question isn’t answered here, please reach out to your IT Coordinator or the IT Help Desk.

Two Factor Authentication (2FA) via DUO